Added - Added a way to recover from a forgotten PIN. After repeated failed attempts, the lock screen now offers to reset the app so you can set it up again. Resetting removes the vault from this device; your photos stay safe in your storage (protected by your encryption key or storage credentials) and can be reconnected later. Important caveat for unencrypted iCloud vaults: without an encryption key, nothing would stop someone who later sets up the app on this device from reopening your photos. To protect your privacy, resetting an unencrypted iCloud vault permanently deletes those photos from iCloud rather than leaving them exposed. The app makes this consequence clear and requires your explicit confirmation before anything is deleted. - Vault settings, storage credentials, and the app PIN are now stored encrypted, protected by keys that never leave your device's Secure Enclave. Unlocking the app starts with a quick Face ID, Touch ID, or passcode check before the PIN pad. Existing vaults are upgraded automatically and safely on first launch. Changed - A device passcode is now required to use the vault. If your device has no passcode, the app explains what to do and waits until one is set. Fixed - Fixed a rare case where completing a purchase might not unlock Pro features right away.

Added - Added a metadata viewer: open any photo, Live Photo, or video and tap Metadata (or "View Metadata" in the video menu) to inspect the location, timestamp, device, camera, and file details currently attached to it, with a red or green dot showing whether each field has a value. Changed - Opening a photo or video from the library now zooms it open from its thumbnail, and zooms back to that spot when you close it, instead of sliding in from the side.

Made several performance improvements so browsing folders, scrolling thumbnails, and opening photos and videos stay smooth and responsive, including on a cold cache and with large videos.

Added: - You can now use Media Den in French, Spanish, and Simplified Chinese, selectable from a new Language option in Settings → General. Fixed: - Fixed the photo controls (Share, Save to Roll, Move, Delete) not appearing at the bottom of the full-screen viewer for regular photos. Live Photos and videos were unaffected.

Added: - Added a first-launch introduction that explains bring-your-own storage and encryption keys before you set up the app, including guidance to keep your encryption key somewhere safe. You can replay it any time from Settings → General → About. - Folders can now be renamed from the folder list - Improved offline browsing: folders, media grids, and item ordering read from the local cache when the device is offline - Local cache files are now encrypted at rest using a device-local AES-256 key; temporary plaintext files needed for video and live photo playback are wiped on lock Changed: - Storage backend logos in Settings now adapt to light and dark mode

Added: - Key recovery: if files were encrypted with a different key, a banner appears in the media grid. Tap it to enter the old key, preview which files it unlocks, and re-encrypt them with your current key — no data loss - Microsoft OneDrive storage backend: store your encrypted vault in OneDrive using a personal Microsoft account, with the same upload, download, list, and health check support as other backends. Access is scoped to Media Den's own app folder — the app cannot see or modify any other files on your OneDrive Changed: - Storage backend picker now shows vendor logos alongside provider names - Removed em dashes from the blog index page on the website - Centralized operation gating logic into VaultOperationGuard for cleaner UI state management - Health checks are now handled directly by each storage backend instead of separate services, simplifying the architecture and ensuring token refreshes during health checks are handled consistently

Fixed - Fixed the "Leave a Review" button not showing the App Store review dialog

Added - App review prompt: after importing 20 items or 2 days after subscribing, a short personal message appears on app open asking for an App Store review - Nearby sharing: send media to another Media Den device over the local network. The sender advertises via Multipeer Connectivity; nearby receivers are prompted automatically. Devices perform a Curve25519 ECDH key exchange to derive an ephemeral session key, then both display a 6-digit verification code (derived from the shared secret) so users can confirm they are connected to each other and not an interceptor. All transferred data is encrypted in transit with AES-GCM using the session key, and items are re-encrypted at rest with the receiver's vault key on arrival.

Changed - Free users can now use the app with up to 20 media items, access all settings, and manage existing media without a subscription

Added - Granular metadata stripping: choose which categories to remove from photos on import — Location, Timestamps, Device Info, and Camera Settings — instead of the previous all-or-nothing toggle - Pinch-to-zoom and double-tap-to-zoom on Live Photos in the detail view - Swipe down on any item in the detail view to dismiss back to the media list Changed - Renamed metadata stripping settings section to "File Metadata Stripping" and moved per-item help text (which media types each option applies to) inline with each toggle - Added a warning about the irreversibility of losing your encryption key to the Set and Change Encryption Key screens - Video actions (share, save, move, delete) are now in a toolbar menu instead of a bottom bar, so they no longer overlap the video player controls - Videos now loop automatically when viewed in the detail view - Share confirmation now warns that live photos retain metadata such as device information Fixed - Fixed media viewer items drifting off-center and overlapping after rotating the device - Fixed images not filling the screen in landscape mode, leaving empty space above the content - Deleting a photo or video from the detail view now returns to the folder's media list instead of jumping to another item - Fixed video audio continuing to play after swiping to a different item in the detail view - Fixed "X of Y" position counter not hiding when tapping to dismiss UI chrome in the detail view - Fixed import progress bar not appearing when importing into an empty folder - Fixed action bar and position counter reappearing when swiping between items after hiding them - Removed unwanted gradient overlay at the top of the media detail view in landscape orientation

Added: - Storage replica support: automatically mirror all writes to a configured backup backend, with WiFi-only mode, automatic retry, and a full management UI in Settings to attach, monitor sync progress, promote to primary, or detach - Backend status dots now reflect network connectivity, storage backend health, in-progress operations (imports, deletes, moves), and failure states at a glance - Pinch-to-zoom on photos in the detail view, with double-tap to toggle between zoomed and default - Long-press on live photos to play them back with audio Fixed: - Fixed Live Photos appearing zoomed in when viewed in the detail viewer - Fixed media cache not being cleared after standard key rotation, which could cause stale decrypted data to persist - Fixed multi-item folder moves (and batch deletes) being silently abandoned if the app is closed mid-operation; operations now persist to the Keychain and resume automatically on next launch from where they left off, with no risk of data loss - Fixed key rotation failing to retry files that encounter transient errors, leaving them permanently stuck with the old encryption key; files are now retried automatically with exponential backoff and multiple retry passes - Fixed media detail view flickering and showing "Downloading" spinner when swiping between items - Improved media pre-fetching speed when swiping — neighboring items now load sooner and in parallel Changed: - When internet connectivity is lost and then restored, the app automatically re-checks backend connectivity and retries every 30 seconds until it succeeds - Replaced the "No Internet Connection" modal with a persistent grey banner at the top of Settings, so you always have visibility into offline status without a disruptive popup; backend configuration and key rotation controls are individually disabled while offline rather than locking down all settings - During key rotation, the media tab is now locked so you stay on Settings until the process completes, instead of showing an orange banner overlay on the media screen - Updated privacy policy with GDPR compliance language for EU App Store launch - Importing media now shows a lightweight progress banner at the top of the grid instead of a full-screen modal overlay, matching the move and delete progress style - Moving media between folders now dismisses the folder picker immediately and shows a progress banner at the top of the grid view, so you can see status without a modal blocking the screen - Import, select, move, and delete actions are now disabled while a move is in progress to prevent conflicting operations - Action buttons (Share, Save to Roll, Move, Delete) now stay fixed at the bottom of the screen when swiping between media items instead of scrolling with the content

Added - Vault unlock flow — "Unlock Vault" button on the Media tab when an encrypted vault is detected on a new device, with encryption key validation - Drag-and-drop reordering of media in the grid view Changed - Switched to a lower-cost annual subscription + a one-time lifetime purchase option - Progress bars show blue completed portion while in progress - Moving media between folders now updates manifests before deleting source files (duplicates-not-data-loss safety) - Deleting media no longer fails on transient manifest errors; ghost entries are auto-cleaned Fixed - Media grid content scrolling behind nav bar / jitter on swipe down - Import now retries manifest writes up to 3 times to reduce orphaned files